Connect Azure AI Foundry

Anchor a scope, establish trust, then read only the subscriptions you choose.

What are we anchored to?

This decides what can be enumerated — and what stays invisible

Single subscriptionOne subscription, connected directly.no enumeration
Management groupEvery subscription under the group becomes connectable.enumerates · Microsoft.Management/getEntities
Whole tenantEvery subscription in the directory.enumerates · subscriptions.list

Subscription ID

Anchoring at a single subscription means nothing beside it can ever be seen. Its siblings will not appear, and their spend will not be attributable.

Regions to scan

Inference is regional; unlisted regions are not read

Cancel

Enter the subscription id and pick at least one region

You run every grant yourself, in your own console. Pathfinder never asks for a password or a key you typed into it, and no role it can assume carries a write permission.